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Abstract. Computational content encoded into constructive type the- 
ory proofs can be used to make computing experiments over concrete 
data structures. In this paper, we explore this possibility when working 
in Coq with chain complexes of infinite type (that is to say, generated by 
infinite sets) as a part of the formalization of a hierarchy of homological 
algebra structures. 
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1 Introduction 

One main feature of constructive type theory, through the well-known Curry- 
Howard isomorphism, is the equivalence between proving and programming. This 
is clearly one of the advantages of Coq [5] with respect to other proof assistants, 
like Isabelle/HOL [22]. This characteristic is the base of reflective tactics, pio- 
neered by S. Boutin [6], and successfully used, for instance, in [14,20]. 

Computing can play another role when formalizing a proof. It can be useful, 
for example, to check some conjecture over concrete cases. When dealing with 
standard data structures (as lists, trees, and the like), these experiments can 
be done in a parallel line by programming the tests in Java, C, or any other 
programming language. If infinite data structures occur, programming them is 
a more delicate task, and it can be rewarding to keep a tighter link among 
programs and specifications. 

Infinite data structures, presented as coinductive objets as streams, have 
been dealt with in the theorem proving literature (see [5] for instance). In this 
work, we undertake another via to manage the infinity, working with algebraic 
structures of infinite type (that is to say, generated by infinite sets) [24]. We 
report in this paper on an experiment of this nature, in the area of homological 
algebra. It is well-known that homological information is not computable over 
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general (infinite type) chain complexes (see [23]). For instance, if (C,d) is an 
acyclic chain complex, and x £ C' n is a cycle (this means d n (x) — 0), then there 
exists z 6 C n+ \ such that d n+ i(z) = x (that is, a; is a boundary). But if C n+ \ is 
a free module of infinite type, and no other information is available, there is no 
general algorithm computing a pre-image z of x. 

Sergeraert's effective homology [25] is a theory allowing solving large classes 
of problems of this sort, even in the infinite dimensional case. This paper contin- 
ues our previous work in translating Sergeraert's ideas to theorem provers [2-4, 
1], with the aim of formalizing this part of algorithmic mathematics and, more 
importantly, of applying formal methods to the study of the Kenzo system [12] (a 
Common Lisp program developed by Sergeraert to implement effective homology 
algorithms). The first important milestone in this area was the mechanized proof 
in the Isabelle/HOL proof assistant of the Basic Perturbation Lemma (BPL), 
published in [2]. This formal proof was carried out in the Higher Order Logic 
(HOL) built on top of Isabelle, and therefore extracting programs from it was 
not a simple task. The findings on this topic were reported in [3]. A different 
approach is being carried out by T. Coquand and A. Spiwack [9] who are using 
Coq to model a part of Category Theory, and then trying to obtain a BPL proof 
in this larger context. 

The data structures of effective homology are organized in two layers (as 
algebraically modeled in [17,10]): the first layer is composed of algebraic data 
structures (chain complexes, simplicial sets, . . . ) and the second one of standard 
data structures (lists, trees, . . . ) which are representing elements of data from the 
first layer. Infinite type data structures appear only in the first layer. Computing 
in this first layer can be done in an abstract way, and it is equivalent in Coq 
to proving theorems. For example, a theorem stating "the direct sum of two 
chain complexes is a chain complex" contains an algorithm constructing the 
mentioned direct sum. Coq can deal with this structure, no matter whether it 
is of finite or infinite type. But actual computations really take place within 
algebraic structures of the first layer. To compute with Coq in this sense has no 
advantage of being any more direct. It is needed to construct concrete instances 
of chain complexes and other possibly infinite algebraic data structures. Then 
we must build concrete elements (second layer) of these particular structures, 
and finally put to work the algorithms abstractly described in the first layer. 

In this paper we discuss this procedure in a case related to the effective 
homology of the cone of a chain complex morphism. This formalization was 
part of the implementation in Coq of the algorithm computing the effective 
homology of a bicomplex (see [11]). Now, we use the computing capabilities of 
Coq to explore whether some concrete cones are acyclic or not, as a previous 
step to proving a general property. 

The paper is organized as follows. Section 2 contains some preliminaries on 
algebraic structures, both in Mathematics and in Coq. Section 3 describes the 
formalization in Coq of the algorithm computing the effective homology of a 
cone, in a way that slightly generalizes our previous work in [11]. Concrete Coq 
instances of chain complexes of infinite type are introduced in Section 4. Then 



explicit calculations with elements are presented in Section 5, using Coq as a 
computing tool to check some conjectures. The paper ends with conclusions, 
future work, and the bibliography. The Coq source files are available at 
https : //esus .unirioja. es/psycotrip/archivos_documentos/CCIADS . zip. 

2 Algebraic Data Structures in Coq 

In this section we introduce the algebraic structures which support our construc- 
tions. They include chain complexes, chain complex morphisms, and reductions 
and effective homologies of chain complexes. The formalization in Coq of these 
structures are also described. 

We assume as known the notions of ring, module over a ring and module 
morphism (see [16] for instance). A ring R commutative and with unity is fixed 
all through the paper, and modules are supposed to be left i?-modules. 

We have built these basic structures in Coq using records called Ring, Module 
and ModHom, respectively. They are based on the ones included in CoRN [13] (but 
simplifying them: basically eliminating the apartness relation included in setoids 
which is not used by us, since we are working in a discrete mathematics setting). 
Besides, further constructions as for instance the addition or the composition 
of module morphisms are defined, and are represented using the infix notation 
[+h] or [oh] , respectively. 

A free R-module generated over a set B is the module R[B] whose elements 
are linear combinations with elements of B as generators. The addition and the 
external product by elements of R are defined in the natural way. Since we are 
planning to work in a constructive logic setting, it is convenient to define a free 
module as one module M where an explicit isomorphism is known between M 
and R[B] (the set of generators B must also be explicitly given). If B is finite, 
the free module is said of finite type. 

The formalization of free modules in Coq follows the ideas given by L. Potticr 
in the Coq contributions web page [19]. There, a definition can be found of a 
module built by freely generation from a basis, which is given by a setoid (i.e. 
a set with an equality, usually denoted by [=] ), using the module operations. If 
we call B the basis setoid, this is representing the mathematical structure R[B] 
introduced above. Then, our formalization of free modules consists of a record 
with a module and an explicit isomorphism to such a freely generated module. In 
order to deal with finite sets in a constructive type theory, more care is needed. 
For instance, several alternatives for defining finite sets in a constructive logic are 
included in [8]. Finite algebraic structures have also been implemented in Coq 
in [15] as a first milestone of a long-term effort to formalize the Feit-Thompson 
theorem. Our formalization is the following. Given a natural number k £ IN, let 
us denote FS(k) the (finite) setoid {0, 1, . . . , k — 1} (with the Leibniz equality). 
We consider a setoid B as finite if it is endowed with a natural number k £ IN 
and an explicit bijection to FS(k). Then, a free module of finite type is a free 
module, but we impose that the generator set is equal (in the Coq internal sense) 
to FS(k). 



We concentrate ourselves in the sequel on free modules, since it is the unique 
kind of modules dealt with in the Kenzo system [12]. 

We are ready to introduce the first graded concept, needed in Homological 
Algebra and Algebraic Topology. 

Definition 1. A graded module M is a family of R-modules indexed by the 
integer numbers (Mi)i e %. A graded module is free (or free of finite type) if Mi 
is free (free of finite type, respectively) for all i £ Z. If x € Mi, the index i is 
called degree of the element x. 

Definition 2. Given a graded module M a differential operator d on M is a 
family of module morphisms {di : M i+ i — > Mi) ie z such that di o d i+ i = for all 



Definition 3. A chain complex is a pair CC = (M, d) where M is a graded 
module and d a differential operator on M . A chain complex is called free (or 
free of finite type ) when its underlying graded module is free (free of finite type, 
respectively). 

Chain complexes have a corresponding notion of morphism. 

Definition 4. A chain complex morphism (or, simply, a chain morphismj 
/: CC -> CC between two chain complexes CC = (M,d) and CC = (M',d r ) 
is a family of module morphisms (fi : Mi — > M t ')j e z such that /, o di = d\ o f i+1 
for all i S Z. 

Given a ring R: Ring, a graded module can be formalized in Coq with the 
following dependent type: Z -> Module R, which accurately represents a family 
of modules indexed by the integer numbers. Then, a (free) chain complex can 
be formalized in Coq using the following record structure: 

Record ChainComplex : Type:= 
{GrdMod :> Z -> FreeModule R; 
Diff: forall i:Z, ModHom (R:=R) (GrdMod (i + 1)) (GrdMod i) ; 
NilpotencyDif f : forall i:Z, (Nilpotency (Diff i) (Dif f (i + 1))}. 

where the nilpotency property is defined by Nilpotency (g: ModHom B C) 
(f :ModHom A B):= forall a: A, ( (g [oh] f ) a) [=] Zero. 

In a similar way, given two chain complexes CC1 CC2: ChainComplex R, a 
chain complex morphism ChainComplexHom is represented as a record with a 
family of module morphisms GrdModHom: >forall i : Z ,ModHom(CCl i) (CC2 i) 
which commutes with the chain complex differentials. 

Now, the central definition in effective homology theory: reduction. A reduc- 
tion establishes a link between a "big" chain complex, called top complex, and 
a smaller one, called bottom complex, in such a way that if all the homological 
problems are solved in the bottom complex, then it is the same in the top one. 

Definition 5. A reduction is a 5-tuple (TCC, BCC, f, g,h) 
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where TCC = (M,d) and BCC = (M',d') are chain complexes (named top 
and bottom chain complex), f: TCC — > BCC and g: BCC —> TCC are chain 
morphisms, h — (hi: Mi — > Mi + i)i e z is a family of module morphisms (called 
homotopy operator ), which satisfy the following properties for all ieZ: 

1- fi° 9i = idM[ 

2. d i+ i o h i+ i + h { odi+ g i+ i o f i+1 = id Mi+1 

3. f i+1 o hi = 
4- hi O Qi = 

5. hi+\ o hi = 

And now, the relevant case. In a free chain complex of finite type the ho- 
mological problems can be solved algorithmically in a simple way (at least in 
cases where the ring R allows one to diagonalize matrices over R; this includes 
the case R = Z, the most important one in Algebraic Topology; see [24]). Thus, 
if from a chain complex (possibly of infinite type) we can get a reduction to a 
chain complex of finite type, the homological problem is solved for the initial 
complex. This is the strategy followed in the Kenzo system. And it is the very 
notion of chain complex with effective homology. 

Definition 6. A chain complex CC is with effective homology if it is free and 
it is endowed with a reduction where CC itself is the top chain complex and the 
bottom chain complex is free of finite type. 

Given a chain complex CC1 : ChainComplex R, a homotopy operator is rep- 
resented in Coq as a family of module: morphisms Homotopy Operator : = 
forall i: Z, ModHomCCl i)(Cl(i + 1)). The reduction notion is 
then formalized as a record Reduction with two chain complexes 
topCC : ChainComplex R, bottomCC : ChainComplex R and three morphisms 
f _t_b : ChainComplexHom topCC bottomCC, g_b_t : ChainComplexHom bottomCC 
topCC, h_t_t : HomotopyOperator topCC. Besides, five fields representing the 
five reduction properties are included. For instance, the field which corresponds 
to the second property is: rp2: homotopy_operator_property f_t_b g_b_t 
h_t_t with: 

Definition homotopy_operator_property:= forall(i: Z)(a: Cl(i+1)), 
(((Diff Cl(i+1)) [oh]h(i+l)) [+h] (h i [oh] (Dif f CI i))[+h] 
(g(i+l) [oh]f (i+1))) a [=] a. 

Some comments on these Coq definitions are needed. Why are the elements in 
this definition considered to be on the i+l-th degree and not on the i-th degree, 
as it is the usual definition of reduction? The same decision was previously 
taken when the definition of differential was introduced. It is clear that as we 
are considering the definition for all the integers, both definitions are equivalent. 
But, a Coq technical problem is easily avoided thanks to our definition. We are 
going to focus our attention on the (h i [oh] (Diff CI i)) component of the 
definition. The differential takes an element in degree i+1 and obtains an element 
in degree i which is translated to a component in degree i+1 by the homotopy 
operator. If we consider the mathematically equivalent definition, considering 



the differential denned from degree i to i-1, then the corresponding component 
would be (h(i-l) [oh] (Diff CI i)). In this composition, the differential takes 
an element in degree i and returns an element in degree i-1, which is now 
translated to a component in degree i-1+1. In Coq this element is equal but is not 
convertible to i. So, we will obtain a Coq type error from this sum of morphisms. 
A transition function between equal but not directly convertible types (which 
it is essentially an identity between types) can be introduced allowing us to 
overcome this drawback 1 . 

The concept of free of finite type chain complex is then obtained in Coq as 
a specialization of the chain complex structure: simply adding that the family 
of modules are free modules of finite type. In a similar way it is formalized the 
concept of effective homology as a specialization of the reduction structure by 
declaring the bottomCC is of finite type. 

3 Effective Homology of the Cone in Coq 

In this section we first define the notion of the cone of a chain complex morphism. 
Then, the main result that we are going to deal with is stated: the effective 
homology of a cone. We also show how this theorem can be proved in Coq. 

Definition 7. Given a pair of chain complexes CC — ((M,), e z, (dj)j e z) and 
CC = ((M t ')j e zj (dOiew,) and a chain complex morphism a: CC —> CC, the 
cone of a, denoted by Cone(a), is a chain complex ((M")j £ z, (rf") ie z) such that, 
for each i G Z, M[' = M, © M' i+1 and d"(x,x') = \-d l (x),d' l+1 (x') + a i+1 (x)) 
for any x G Mj+i and x' G M' i+2 . 

Now, the theorem which determines the effective homology of a cone can be 
stated. 

Theorem 1. Given two reductions r = (TCC, BCC, /, g, h) and r' = 
{TCC',BCC',f',g',ti) and a chain morphism a: TCC -> TCC be- 
tween their top chain complexes, it is possible to define a reduction r" = 
(Cone(a), BCC" , f" , g" , h") with Cone{a) as top chain complex and: 



- BCC" = Cone{a') with a' : BCC -> BCC defined by a' = f oaog 

- f" = (f,f'oaoh + f), g" = (g,-h'oaog + g>), h" = (-h, h'oaoh + h') 
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1 We acknowledge T. Coquand for the suggestion of this idea. 



Besides, if TCC and TCC are objects with effective homology through the re- 
ductions r and r' , then Cone(a) is an object with effective homology through 
r". 

In [11] we formalized in Coq the effective homology of a bicomplex. That 
result can be considered as a generalization of the previous theorem to an infinite 
(indexed by the natural numbers) family of reductions. Nevertheless, in order to 
obtain it, the chain complexes must be positive, i.e., with null components in 
the negative indexes (or, in other equivalent presentation, indexed by the natural 
numbers). In this paper, we have not this constraint since we work with a general 
definition of chain complex, with modules indexed by integer numbers. 

The formalization of Theorem 1 in Coq is obtained as follows. Given two 
chain complexes CCO CC1: ChainComplex R and a chain complex morphism 
f : ChainComplexHom CC1 CCO, the cone of this morphism is a chain complex 
with family of modules ConeGrdMod : = fun i: Z => Sum_FreeModule (CC1 i) 
(CC0(i+l)) (with the direct sum of free modules Sum_FreeModule defined in a 
natural way) and with differential operator defined as follows: 

Definition ConeDiffGround:= fun (i: Z) (ab : (ConeGround (i+l))) => 
([— ](Diff CC1 i(fst ab)), ((Diff CC0(i+l) ) (snd ab) [+] f (i+l) (f st ab))). 

It is not difficult to prove that these functions define a module morphism which 
satisfies the differential condition. This last property allows one to build the cone 
chain complex associated to a chain complex morphism: Cone(f ). 

Given now two reductions rl r2: Reduction R and a chain complex mor- 
phism between their top chain complexes alpha: ChainComplexHom (topCC rl) 
(topCC r2), it is possible to define a chain complex morphism alpha' be- 
tween the bottom chain complexes through the function alpha' ' := fun n: Z 
=> (f _t_b r2 i) [oh] (alpha i) [oh] (g_b_t rl i) . 

The first part of Theorem 1 is proved if we build a reduction between 
Cone (alpha) and Cone (alpha' ) . The first chain complex morphism of the re- 
duction is defined in the following way: 

Definition f _cone_reductionGround: 
forall i: Z, (Cone alpha) i -> (Cone alpha') i:= 
fun (i: Z)(ab: (Cone alpha) i) => ((f_t_b rl i) (fst ab) , 
(((f_t_b r2 (i+l)) [oh] (alpha (i+l)) [oh] (h_t_t rl i)) (fst ab) ) [+] 
(f_t_b r2 (i+l)) (snd ab)). 

Analogous definitions are provided for the two other morphisms of the reduc- 
tion. Then we state Coq lemmas for the reduction properties on these morphisms. 
The proof of these lemmas consists in applying mainly equational reasoning over 
setoid equalities, following closely the paper and pencil proof. It allows building 
the reduction of a cone: ConeReduct i on ( alpha) . 

Finally, given two effective homologies rl r2: Ef f ectiveHomology R and 
a chain complex morphism alpha between their top chain complexes, 
ConeReduct ion (alpha) is directly a reduction of the cone. Then, in order to 
define an effective homology for the cone it remains to prove that the bottom 
free chain complex of this reduction is free of finite type. It is easily obtained 



in Coq since the direct sum of free chain complex of finite type is free of finite 
type. 



4 Instances of Chain Complexes of Infinite Type 

A working representation in a proof assistant of the concepts included in previ- 
ous sections has to be sound, but also needs to be useful. The second feature can 
be shown by formally proving some results. This was the purpose of the previous 
section. The first feature can be illustrated by providing instances of the repre- 
sentations, that accurately reflect usual mathematical entities. This is the aim 
of this section which includes different instances of all the previous structures. 

First, we define some elementary instances which will act as building blocks 
for more elaborated constructions. The first example is the null free module 
(i.e., a module with the unit as unique element). This is indeed a free 
module of finite type, generated by the setoid with zero elements. Then, a null 
free chain complex can be defined CC^ = ((M(°>) ieZ) (rf (0) ) ie z) (t.e., with the 
previous module in each degree and the null differential). This chain complex 
can be also built as a free chain complex of finite type FCC^ , defined from the 
corresponding free module of finite type. Obviously, a trivial effective homology 
for this chain complex can be defined. 

Another basic example is the free module of the integers Z (over the ring 
of integers) which we denote in Coq by ZFreeModule. This module can be 
also implemented as a module of finite type, ZFinFreeModule, generated by 
the setoid with only one element. Then, an example of free chain complex is 
CC« = ((MW) ieZ ,(d^) ie z) with (M«) 4 = Z, Vi G Z, and (d^)*: Z -> Z 
such as (d^)i(x) = 2 * x if i is even and (d^)i(x) = otherwise: 

x2 „ _ x2 „ „ x2 



degree -2 -1 1 2 

The Coq formalization of the required differential is obtained through 
the functional type fun i: Z => if (Zeven_bool i) then x2_ModHom else 
(ModHom_zero ZFreeModule ZFreeModule). It is easy to prove that this mor- 
phism satisfies the nilpotency condition. A similar free chain complex of finite 
type FCC^ can be defined using the corresponding family of free modules of 
finite type. Besides, we can define a trivial effective homology between both 
complexes that we name Id_Z_2x_0_Ef f ectiveHomology: 

_ o 

Y\ id 

CCW FCC^ 



The previous examples are chain complexes of finite type, since the modules 
are free of finite type (in that case with zero or one generator). An example 
of a free module of infinite type is Z[1N], the free module generated by the 



natural numbers (over the ring of integer numbers) which we denote in Coq 
by Z_nat_FreeModule. It is defined by taking as free module the one freely 
generated from the setoid denoted in Coq by nat_as_Setoid (that is to say, 
the setoid of natural numbers with the Leibniz equality). The definition is then 
completed with the same module as module representation and the identity as 
isomorphism between them. To keep notations clear, the generator i of ZpN] will 
be denoted by Xi,Vi e IN. 

Now, a chain complex of infinite type CC^ — ((M( 2 )) ieZ , (d^)^^) is built 
where (M^) t = ZpN], Mi e Z, and {d^) t : Z[IN] -> Z[IN] defined on generators 
(and then extended to all elements by freely generation) in the following way: if 
i is even, (d^)i(xj) = Xj if j is even and (d^)i(xj) — otherwise; and if i is 
odd, (d^)i(xj) = if j is even and (d^)i(xj) = Xj otherwise. This differential 
on generators can be illustrated with the following diagram: 

Z[]N] Z[IN] ZpN] -i^ ZpN] 

xq ^ 1 x o < 1 

0^ \xi xi~* ixi 

x 2 1 x 2 < 1 x 2 

< 1 2:3 x 3 ^ 1 x 3 



This chain complex is named in our representation Z_nat_ChainComplex. 
Its differential can be easily defined using auxiliary functions as fun n: 
nat_as_Setoid => if even_bool n then Var _ n else Unit _ _. Here, we 
are using the Unit notation for the null element as in L. Pottier' s develop- 
ment. It is not difficult to prove that this morphism satisfies the nilpotency 
condition (in other words, it is really a differential). 

Now, it is possible to define a homotopy operator on CC^ built on 
generators in the same way as the previous differential (but, defined from an 
element in the module at degree i to an element in the module at degree i + 1). 
Obvious morphisms allow us to complete an effective homology from this last 
free chain complex to the null free chain complex of finite type FCC^°\ This 
last effective homology proves that CC^ is acyclic. 

In order to define a more interesting effective homology we define the 
free chain complex CC^ © CC^ obtained from the direct sum of the two 
previous chain complexes. Then, it is easy to define an effective homology 
Z_x_Z_nat_Ef f ectiveHomology: 

(0,h< 2 >) 

/~\ _ ^ 

CC« © CC^ ~Z ^ FCC^ 

(*d,0) 



where 7ri is the canonical projection in the first component. 



Finally, we consider a free chain morphism between the top chain com- 
plexes of Z_x_Z_nat_Ef f ectiveHomology and Id_Z_2x_0_Ef f ectiveHomology 
again through the canonical projection in the first component: 



(0,h (2) ) 

cc« e cc^ ^_ 



V7„ 



(id,0) 



id 



id 



■ FCCW 



Then, we can obtain in Coq the cone of this morphism and the effective 
homology associated to it, named Example_Cone_Ef f ectiveHomology, as a par- 
ticular instance of our general result developed in the previous section: 



Cone(iri) ^_ 



r Cone(a') 



We will use this effective homology instance to make concrete computations in 
Coq in the following section. 



5 Computing with Infinite Data Structures in Coq 

Working in the Coq constructive type theoretic setting allows us to obtain from 
proofs directly computable terms. In the previous section we obtained instances 
of meaningful examples of all our data structures, so we can now make calcu- 
lations with them through the associated algorithms (which have been proved 
correct in Coq). In particular we can make computations within instances of 
chain complexes of infinite type. 

We will use the vm_compute Coq tactic for evaluating terms. It computes 
the goal using the optimized call-by-value evaluation bytecode-based virtual 
machine [19]. Another option consists in using the Coq extracting code mecha- 
nism. Nowadays, the functional languages available as output in Coq are OCaml, 
Haskell and Scheme [18]. This extracted code should be, in principle, efficient 
but the presence of dependent types makes it complicated, at least in the Haskell 
case. Being Scheme a kind of Lisp, its dynamical typing style should be more 
convenient from this point of view in order to be our target language in which 
extracts our code. Nevertheless it seems to be the least developed frame (see [19] 
again). Since Kenzo is implemented in Common Lisp it is clear that the prob- 
lems encountered with Scheme are important for us if we want to extract code 
which was directly comparable with the Kenzo code. We do not follow this line 



in this paper. We explore rather the possibilities of the internal execution of Coq 
terms. 

We are going to choose as an example the top chain complex of 
Example_Cone_Ef f ectiveHomology, i.e. Cone(iri). This is an example of chain 
complex of infinite type. For instance, we want to compute its differential applied 
to the element (5, 7*X4 + 8*xo, 3) at degree 2. Since the module at degree 2 of the 
cone (and, in fact, at any degree) is Z©Z[]N]©Z, the element (5, 7*X4 + 8*x , 3) 
has a component in each module. The first and third components appear sim- 
ply as integers, because Z is considered a free module over a singleton which is 
skipped. On the contrary, elements in the second component are true combina- 
tions in Z[IN] with generator Xi (recall our convention of naming Xi the element i 
of IN). Thus the modules of the cone are not presented as free modules, but they 
are isomorphic to modules freely generated, as it is inferred from the results of 
Section 3. 

The second element of the tuple (5, 7 * x 4 + 8 * x , 3) is represented in Coq 
bye:= Law (Op (R:= Z_as_Ring) 7 (Var _ (47„nat : nat_as_Setoid) ) ) (Op 
(R:= Z_as_Ring) 8 (Var _ (O'/nat: nat_as_Setoid) ) ) . 

The required Coq code is then the following: 

Eval vm_ compute in 
((Diff (topCC Example_Cone_Eff ectiveHomology) 2) (5, e, 3)). 

and the result returned by Coq is: 

= (-10, Inv e, 5): topCC Example_Cone_Eff ectiveHomology 2 

i.e., (—10, —(7 * x 4 + 8 * xo), 5). If we apply now the (degree 1) differential to 
this element we obtain: 

= (0, Inv (Inv (Law (Op 7 (Unit Z_as_Ring nat_as_Setoid) ) 

(Op 8 (Unit Z_as_Ring nat_as_Setoid) ) ) ) , 0) 
: topCC Example_Cone_Eff ectiveHomology 1 

or, in plain notation, (0, — (— (7 * () + 8 * ()), 0) which it is equal (in the setoid) to 
the null element. It should be recalled that our formalization of the free module 
generated by the natural numbers directly use the L. Potticr definition for free 
modules, and, as a consequence, we are not working with canonical elements on 
the free modules or with structures which allow a reduction to them. 

Now, we focus our attention on homotopy operators, that is to say on mor- 
phisms which increase in one unity the degree into the graded module. We use 
as ambient structures the chain complexes Cone{it\) and Cone(a') introduced 
in the previous section. 

Some examples of homotopy operators for Cone(a'), h = (hi: Cone(a')i — > 
Cone(a') i+1 ) ie i, 1 are the following: 

— hi = (Mi)iez, such that hli(a,b) :— (0, a), (a,b) G Cone(a')i for all i G Z 

- h2 = (h2i) ieZ , such that h2i(a,b) := (6,0), (a,b) G Cone(a')i for alii G Z 



Both can be easily implemented in Coq. For example, the first one is represented 
through: 



Definition hi': forall i:Z, bottomCC Example_Cone_Ef f ectiveHomology i -> 
bottomCC Example_Cone_Eff ectiveHomology (i + 1):= 
fun (i:Z)(c: bottomCC Example_Cone_Eff ectiveHomology i) => (0, fst c) . 

There exist special homotopy operators called contracting homotopies which 
express algorithmically that the chain complex is acyclic [24] . 

Definition 8. A chain complex is acyclic if it is possible to define an effective 
homology from it to the null chain complex. 

Corollary 1. Let CC = (M, d) be a chain complex, CC is acyclic if and only 
if there exists a homotopy operator h defined on CC such that do h + ho d = id. 
Such an operator is called contracting homotopy. 

We can test if the previous homotopy operators define a contracting homo- 
topy. For instance, the corresponding tactic at degree i=l choosing as element 
(5, 7): bottomCone 2 for the first candidate is: 

Eval vm_compute in 

(((Diff (bottomCC Example_Cone_Eff ectiveHomology) 2) [oh] (hi 2))[+h] 
((hi 1) [oh] (Diff (bottomCC Example_Cone_Eff ectiveHomology) 1)))(5, 7). 

resulting in: = (0, 0): bottomCC Example_Cone_Eff ectiveHomology 2. 

For the second homotopy operator over the same element we obtain: 

Eval vm_ compute in 

(((Diff (bottomCC Example_Cone_Eff ectiveHomology) 2) [oh] (h2 2))[+h] 
((h2 1) [oh] (Diff (bottomCC Example_Cone_Eff ectiveHomology) 1)))(5, 7). 

resulting in: = (5, 7): bottomCC Example_Cone_Eff ectiveHomology 2. 

This means that hi is not a contracting homotopy for Cone(a'). It could be, 
anyway, acyclic. The homotopy operator h2 could be a candidate for contracting 
homotopy and, in fact, if we test other elements in other dimensions we always 
obtain the identity. 

Moreover, using the homotopy operator h2 and the one h Ex in the effective 
homology at the end of the previous section, we can define a new homotopy 
operator over Cone(ni) with the formula h = h Ex + g Ex oh2o f Ex . Graphically: 



h=h E:c + g E "o hi of 1 



Cone(ni) ; 



h2 



[ Cone(a') 



This homotopy operator can be easily defined in Coq in the following way: 
Definition h_topCone: 

(HomotopyOperator (topCC Example_Cone_Eff ectiveHomology) ) := 
fun n: Z => (h_t_t Example_Cone_Eff ectiveHomology) n [+h] 
(((g_b_t Example_Cone_Eff ectiveHomology) n) [oh] (h2 n) [oh] 
((f_t_b Example_Cone_Eff ectiveHomology) n)). 



We can test if it is a candidate to be a contracting homotopy: 
Eval vm_ compute in 

(((Diff (topCC Example_Cone_EffectiveHomology) 2) [oh] (h_topCone 2)) 
[+h] ( (h_topCone 1) [oh] 
((Diff (topCC Example_Cone_EffectiveHomology) 1))))(5, e, 3). 

whose result is an element equal (in the setoid) to (5, e, 3). 

The testing with other elements and at other degrees is always successful and 
this allows us to conjecture that it is really a contracting homotopy. 

If that is the case, it could be used to solve a problem that, in general, is 
undccidable when working with chain complexes of infinite type. If an element x 
is a cycle (that is to say, d n (x) = 0) and the chain complex is acyclic, then there 
exists an element z such that d n+ \{z) — x. Or, in other words, z is a pre- image 
of x for the differential. Let us compute such a pre-image in our example. To this 
aim, we choose again x = (— 10, — (7 * X4 + 8 * x ), 5) as an element at degree 2. 
Wc know already it is a cycle, because it has been previously computed. Then, 
if our homotopy operator h is actually a contracting homotopy, the image h{x) 
must be a pre-image of x for d (since dh(x) + hd(x) = x, but hd(x) = 0). We 
can test in Coq this fact as follows. First we apply the homotopy operator on 
the element: 

Eval vm_compute in (h_topCone 2) (-10, Inv e, 5). 

obtaining an element equal to (5 , e , 0) . And due to our previous computations 
we know that this element is indeed in the right pre-image because 

Eval vm_ compute in 

((Diff(topCC Example_Cone_EffectiveHomology) 2)) (5, e, 0). 

gives the required element (-10, Inv e, 5). 

This behaviour is not accidental. The testing is reflecting a general result 
relating cones and reductions. Namely: 

Proposition 1. Let (M,N,f,g,h) be a reduction. Then Cone(f) is an acyclic 
chain complex. 

The constructive proof of this proposition gives exactly the formula we were test- 
ing before. Finally, we could proof in Coq that h2 and h are indeed contracting 
homotopies which is now an easy exercise. Also Corollary 1 and Proposition 1 
could be formalized in Coq, although more effort is required. Both tasks are 
proposed as future work. 

6 Conclusions and Further Work 

In this paper we have presented some examples relating deduction and computing 
in the Coq proof assistant. Even if constructive type theory always allows, in 
principle, the modeler to execute terms (by reducing them) this is rarely used in 
development (or, at least, it is rarely documented). In our case, testing has been 
worked out in an infinite dimensional setting. Concretely, we have constructed 



concrete instances of chain complexes of infinite type, we have computed in Coq 
with their elements, and we have checked some formula producing a contracting 
homotopy on one of the chain complexes. This testing corresponds to a general 
theorem that could be, later on, proved in Coq, too. 

The chain complexes of infinite type used as examples in this paper are, in 
some sense, artificial. It can be considered as a demonstration of feasibility. In 
a future step, we will undertake the implementation in Coq of more meaningful 
infinite dimensional spaces. Our first candidates will be loop spaces. The chain 
complex associated to a combinatorial loop space (see Kan's G construction in 
[21]) is of infinite type. Under good conditions, its homology groups are, however, 
of finite type. Computing these homology groups was one of the first challenges 
solved by Kenzo (see [24] ) , and working with them in Coq would be an interesting 
issue. 

One unpleasant aspect of our work is that we are working in a context where 
combinations are not in normal form. This implies that, once a function has 
been applied, some work is needed to prove the result is equal to some assumed 
test value. Several approaches are known to tackle this reduction to canonical 
form, and we should systematically explore some of them to propose a more 
comfortable way of doing testing in Coq. Another via to avoid this difficulty 
could be to give setoids up and work inside the ssreflect framework [14]. 

Another related line is that of code extraction. We should retake the works 
on going from Coq to Scheme [18], and adapt them to Common Lisp. Since that 
we have a model (Kenzo [12]) of the programs we would like to extract, the 
challenge would be to devise Coq statements and proofs in such a way that the 
extracted programs would be as close as possible to the selected Kenzo fragment. 

Finally we could study the possibilities of tools like QuickCheck [7] in our 
setting. This system allows to test properties of programs automatically by gen- 
erating a large number of cases (although, up to our knowledge, there is no direct 
application to Coq code). 
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